CA2548866C - Coordinated storage management operations in replication environment - Google Patents

Coordinated storage management operations in replication environment Download PDF

Info

Publication number
CA2548866C
CA2548866C CA2548866A CA2548866A CA2548866C CA 2548866 C CA2548866 C CA 2548866C CA 2548866 A CA2548866 A CA 2548866A CA 2548866 A CA2548866 A CA 2548866A CA 2548866 C CA2548866 C CA 2548866C
Authority
CA
Canada
Prior art keywords
data
data store
storage management
set
management operations
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CA2548866A
Other languages
French (fr)
Other versions
CA2548866A1 (en
Inventor
John A. Colgrove
Oleg Kiselev
Ronald S. Karr
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Symantec Operating Corp
Original Assignee
Symantec Operating Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority to US10/750,596 priority Critical patent/US7139887B2/en
Priority to US10/750,596 priority
Application filed by Symantec Operating Corp filed Critical Symantec Operating Corp
Priority to PCT/US2004/044029 priority patent/WO2005066783A2/en
Publication of CA2548866A1 publication Critical patent/CA2548866A1/en
Application granted granted Critical
Publication of CA2548866C publication Critical patent/CA2548866C/en
Application status is Active legal-status Critical
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16Error detection or correction of the data by redundancy in hardware
    • G06F11/20Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/2053Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where persistent mass storage functionality or persistent mass storage control functionality is redundant
    • G06F11/2056Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where persistent mass storage functionality or persistent mass storage control functionality is redundant by mirroring
    • G06F11/2064Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where persistent mass storage functionality or persistent mass storage control functionality is redundant by mirroring while ensuring consistency
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16Error detection or correction of the data by redundancy in hardware
    • G06F11/20Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/2053Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where persistent mass storage functionality or persistent mass storage control functionality is redundant
    • G06F11/2056Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where persistent mass storage functionality or persistent mass storage control functionality is redundant by mirroring
    • G06F11/2071Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where persistent mass storage functionality or persistent mass storage control functionality is redundant by mirroring using a plurality of controllers
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14Error detection or correction of the data by redundancy in operation
    • G06F11/1402Saving, restoring, recovering or retrying
    • G06F11/1471Saving, restoring, recovering or retrying involving logging of persistent data for recovery
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2201/00Indexing scheme relating to error detection, to error correction, and to monitoring
    • G06F2201/82Solving problems relating to consistency
    • GPHYSICS
    • G06COMPUTING; CALCULATING; COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F2201/00Indexing scheme relating to error detection, to error correction, and to monitoring
    • G06F2201/84Using snapshots, i.e. a logical point-in-time copy of the data
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10TECHNICAL SUBJECTS COVERED BY FORMER USPC
    • Y10STECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10S707/00Data processing: database and file management or data structures
    • Y10S707/99951File or database maintenance
    • Y10S707/99952Coherency, e.g. same view to multiple users
    • Y10S707/99953Recoverability
    • YGENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10TECHNICAL SUBJECTS COVERED BY FORMER USPC
    • Y10STECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y10S707/00Data processing: database and file management or data structures
    • Y10S707/99951File or database maintenance
    • Y10S707/99952Coherency, e.g. same view to multiple users
    • Y10S707/99955Archiving or backup

Abstract

A method, system, computer systern, and computer-readable medium for maintaining up-to~-date, consistent copies of primary data without the need to replicate modified data when the data were modified as a result of an operation that is not an application-driven write operation captured during replication. Selected storage management operations are performed on the primary and secondary data stores at points in time when the data are the same to ensure that the data stored within the data stores remain consistent. These selected storage management operations include operations that produce modified data stored in the primary data store, where a portion of the modified data are not replicated to a secondary node. Other types of storage management operations are selected to be performed on both the primary and secondary data stores, where the operations do not directly change data in the primary data store, but may affect data stored in the primary data store.

Description

COORDINATED STORAGE MANAGEMENT OPERATIONS
IN REPLICATION ENVIRONMENT
Portions of this patent application contain materials that are subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent document, or the patent disclosure, as it appears in the Patent and Trademark Office file or records, but otherwise reserves all copyright rights whatsoever.
BACKGROUND
Information drives business. For businesses that increasingly depend on data and to information for their day-to-day operations, unplanned downtime due to data loss or data corruption can hurt their reputations and bottom lines. Businesses are becoming increasingly aware of the costs imposed by data corruption and loss and are taking measures to plan for and recover from such events. Often these measures include making backup copies of primary, or production, data, which is 'live' data used for operation of the business.
Backup copies of primary data are made on different physical storage devices, and often at remote locations, to ensure that a version of the primary data is consistently and continuously available.
Two areas of concern when a hardware and/or software failure occurs, as well as during the subsequent recovery, are preventing data loss and maintaining data consistency between primary and backup data storage. Consistency ensures that, even if the backup copy of the primary data is not identical to the primary data (e.g., updates to the backup copy may lag behind updates to the primary data), the backup copy represents a state of the primary data that actually existed at a previous point in time. If an application completes a sequence of write operations A, B, and C to the primary data, consistency can be maintained by preventing the write operations from occurring in reverse order with respect to one another on the backup copy of the data. The backup copy should not reflect a state that never actually occurred in the primary data, such as would have occurred if write operation C were completed before

- 2 -write operation B. Some write operations in the set may occur concurrently, and some or all of the write operations may be committed atomically to achieve a consistent state of the data on the secondary node.
One way to achieve consistency and avoid data loss is to ensure that every update made to the primary data is also made to the backup copy, preferably in real time. Often such "duplicate" updates are made locally on one or more "mirror" copies of the primary data by the same application program that manages the primary data. Mirrored copies of the data are typically maintained on devices attached to or immediately accessible by the primary node, and thus are subject to failure of the primary node or corruption of data accessible via the primary node.
Therefore, making mirrored copies locally does not prevent data loss, and primary data are often replicated to secondary sites. Maintaining copies of data at remote sites, however, introduces another problem. When primary data become corrupted and the result of the update corrupting the primary data is propagated to backup copies of the data through replication, "backing out" the corrupted data and restoring the primary data to a previous state is required on every copy of the data that has been made. Previously, this problem has been solved by restoring the primary data from a backup copy made before the primary data were corrupted. Backup copies are commonly made on storage devices having the same access speed as the storage devices storing the primary data. Once the primary data are restored, the entire set of primary data is copied to each backup copy to ensure consistency between the primary data and backup copies. Only then can normal operations, such as updates and replication, using primary data resume.
The previously-described technique of copying the entire set of primary data to each backup copy ensures that the data are consistent between the primary and secondary sites.
However, copying the entire set of primary data to each backup copy at secondary sites uses network bandwidth unnecessarily when only a small subset of the primary data has changed.
Furthermore, copying the entire set of primary data across a network requires a significant

- 3 -amount of time to establish a backup copy of the data, especially when large amounts of data, such as terabytes of data, are involved. All of these factors delay the resumption of normal operations and can cost companies a large amount of money due to downtime.
What is needed is the ability to maintain consistent, up-to-date copies of primary data that enable quick resumption of operations upon discovery of corruption of the primary data or failure of the primary node.
SUMMARY
In one embodiment there is provided a method. The method involves establishing a relationship between a first data store and a second data store and performing a set of storage to management operations on the first data store, wherein the first data store stores first data and each storage management operation of the set of storage management operations on the first data store performs at least one of producing modified data from data in the first data store, and changing a configuration of the first data store. The performing the set of storage management operations on the first data store occurs while the relationship is ongoing, during a procedure in which the first data in the first data store is being copied to the second data store, and the set of storage management operations includes certain storage management operations the results of which would not be captured during the procedure.
The method also involves performing the set of storage management operations on the second data store, wherein if the set of storage management operations performed on the first data store produces the modified data and a portion of the modified data is not included in the first data, the second data store is updated to include a copy of the portion of the modified data by virtue of the performing the set of storage management operations on the second data store, and the set of storage management operations is performed in a first relative order on the first data store with respect to a set of application-driven writes to the first data store, and the set of storage management operations is performed in the same relative order on the second data store such that consistency is maintained between the second data store and the first data store.

- 4 -One storage management operation of the set of storage management operations may restore a portion of the first data in the first data store from third data in a third data store and the performing the set of storage management operations on the second data store may involve causing a corresponding portion of second data in the second data store to be restored from fourth data in a fourth data store. The portion of the first data and the portion of the second data are the same after the restoring the portion of the first data and after the causing the corresponding portion of the second data to be restored.
One storage management operation of the set of storage management operations may synchronize the first data in the first data store with third data in a third data store and the lo performing the set of storage management operations on the second data store may involve causing second data in the second data store to be synchronized with fourth data in a fourth data store corresponding to the third data store, wherein the first data and the second data may be the same after the synchronizing the first data and after the causing the second data to be synchronized.
One storage management operation of the set of storage management operations may change the configuration of the first data store by creating a first snapshot data store related to the first data store wherein a first snapshot of the first data in the first data store is stored in the first snapshot data store and the performing the set of storage management operations on the second data store involves causing a second snapshot data store related to the second data store to be created, wherein a second snapshot of second data in the second data store is stored in the second snapshot data store, and the first snapshot and the second snapshot include data that are the same.
The method further involves establishing a replication relationship between the first snapshot data store and the second snapshot data store after the second snapshot data store is created, wherein the replication relationship causes subsequently modified data in the first snapshot data store to be included in selected snapshot data copied to the second snapshot data store.

- 5 -The subsequently modified data may be copied to the second snapshot data store when the selected data are copied to the second data store.
At a first point in time during the performing the set of storage management operations on the first data store, a first storage management operation of the set of storage management operations may be performed on the first data store, and the first data store may include the first data, and at a second point in time, when the first storage management operation is performed on the second data store, the second data store may include a copy of the first data.
If at a first point in time during the performing the set of storage management operations on the first data store, the first data store may include the first data, then at a second to point in time, when the second data store represents the first data store at the first point in time, the second data store may include a copy of the first data.
The set of storage management operations may include an ordered subset of the set of storage management operations, wherein storage management operations in the ordered subset of storage management operations may be performed on both the first data store and the second data store in a sequential order.
The method may involve producing the modified data at a specified point in the first relative order on the first data store, wherein the specified point may be between a first respective point in the first relative order and a second respective point in the first relative order, the first respective point and the second respective point may be adjacent in the first relative order, and the performing the set of storage management operations on the second data store may involve causing the producing the copy of the modified data to occur at the specified point in the first relative order on the second data store.
The causing the producing the copy of the modified data to occur at the specified point may involve inserting a command in the first data copied from the first data store to the second data store to produce the copy of the modified data at the specified point.
The ordered subset of storage management operations may involve all storage management operations in the set of storage management operations.

- 6 -The performing the set of storage management operations on the second data store may involve causing at least one command that performs the set of storage management operations to be executed on the second data store.
The first data may involve data modified as a result of a write operation.
The set of storage management operations may not include the write operation.
The first data may further include a portion of a snapshot of the first data stored in the first data store, and the portion of the snapshot may be modified as a result of a second write = operation.
The set of storage management operations may not include the second write operation.
The method may involve, upon failure of a primary node associated with the first data store, identifying a portion of the first data in the first data store, wherein the portion has not been copied to the second data store, and causing only the portion to be copied to the second data store such that the first data and second data stored in the second data store are the same.
In another embodiment there is provided a system establishing provisions for establishing a relationship between a first data store and a second data store, performing provisions for performing a set of storage management operations on the first data store, wherein the first data store stores first data, each storage management operation of the set of storage management operations on the first data store performs at least one of producing modified data from first data in the first data store, and changing a configuration of the first data store. The performing the set of storage management operations on the first data store occurs while the relationship is ongoing, during a procedure in which the first data in the first data store is being copied to a second data store, and the set of storage management operations comprises certain storage management operations, the results of which would not be captured during the procedure and second performing provisions for performing the set of storage management operations on the second data store. Wherein if the set of storage management operations performed on the first data store produces the modified data and a portion of the modified data is not included in the first data, the second data store is updated to include a

- 7 -copy of the portion of the modified data by virtue of the performing the set of storage management operations on the second data store, and the set of storage management operations is performed in a first relative order on the first data store with respect to a set of application-driven writes to the first data store, and the set of storage management operations is performed in the same relative order on the second data store such that consistency is maintained between the second data store and the first data store.
The set of storage management operations may include an ordered subset of the set of storage management operations, wherein storage management operations in the ordered subset of storage management operations are performed on both the first data store and the second data store in a sequential order.
The system may involve causing provisions for causing the producing the copy of the modified data to occur at a specified point in the sequential order on the second data store, wherein producing the modified data occurs at the specified point in the sequential order on the first data store, the specified point is between a first respective point in the sequential order and a second respective point in the sequential order, the first respective point and the second = respective point are adjacent in the sequential order.
The system may involve inserting provisions for inserting a command in the first data copied from the first data store to the second data store to produce the copy of the modified data at the specified point.
Other storage management operations are selected to be performed on both the primary and secondary data stores, where the operations are a type of operation that does not directly change data in the primary data store, but may have an effect on data stored in the primary data store. For example, a configuration change such as creation of a snapshot volume does not affect data stored in the primary data store, but rather makes a copy of that data. However, if the snapshot volume were later used to restore data in the primary data store, and a copy of the snapshot volume is not present in the secondary data store at that time, data in the primary and secondary data stores become inconsistent. Therefore, an operation creating a snapshot is included in the operations selected to be performed on the secondary

- 8 -data store. Some embodiments may ensure that a secondary snapshot volume containing a copy of the data used to restore the primary data store is available to be used to restore the copy of the data in the secondary data store. By providing the same data in the primary and secondary data stores, it is possible to avoid replicating each data item changed during the restoration.
BRIEF DESCRIPTION OF THE DRAWINGS
The present invention may be better understood, and its numerous objectives, features, and advantages made apparent to those skilled in the art by referencing the accompanying drawings.
to Fig. 1 shows an example of a system environment in which the present invention may operate.
Fig. 2 is a flowchart of one example of a method for maintaining consistent and up-to-date copies of primary data on secondary nodes.
Figs. 3A-3F show a series of actions occurring in the system of Fig. 1.
Fig. 3A shows a series of updates to data followed by creation of a snapshot of primary data.
Fig. 3B shows another series of updates to data occurring after the snapshot of Fig. 3A
is created.
Fig. 3C shows replication of the data resulting from the updates of Figs. 3A
and 3B
and a command inserted into the replication stream.

- 9 -Fig. 3D shows arrival of the command of Fig. 3C at the secondary node.
Fig. 3E shows creation of a snapshot on the secondary node in response to execution of the command at the secondary node.
Fig. 3F shows the system after all updates of Figs. 3A and 3B are written to storage on the secondary node.
Fig. 4 is an example configuration of a computer system that can be used to operate the present invention.
The use of the same reference symbols in different drawings indicates similar or identical items.
DETAILED DESCRIPTION
For a thorough understanding of the subject invention, refer to the following Detailed Description, including the appended Claims, in connection with the above-described Drawings. Although the present invention is described in connection with several embodiments, the invention is not intended to be limited to the specific forms set forth herein.
On the contrary, it is intended to cover such alternatives, modifications, and equivalents as can be reasonably included within the scope of the invention as defined by the appended Claims.
In the following description, for purposes of explanation, numerous specific details are set forth in order to provide a thorough understanding. It will be apparent, however, to one skilled in the art that some embodiments can be practiced without these specific details.
References in the specification to "one embodiment" or "an embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment is

- 10 -included in at least one embodiment. The appearances of the phrase "in one embodiment" in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments.
Moreover, various features are described which may be exhibited by some embodiments and not by others. Similarly, various requirements are described which may be requirements for some embodiments but not other embodiments.
Terminology The terms "consistent" and "consistency" are used herein to describe a backup copy of data that is either an exact copy of the data or accurately represents a state of the data as the data existed at a previous point in time. To accurately represent a state of the data as the data existed at a previous point in time, while write operations and replication of the data are ongoing, the term "consistency" is used to indicate that the backup copy includes the data produced by all write operations that had completed at the previous point in time. In addition, to be consistent, the backup copy cannot include the data produced by write operations that had not yet begun at that previous point in time. Determining consistency for data produced by write operations that were in progress at the previous point in time is discussed in the following paragraph.
Data being written by write operations that were in progress and updating different data concurrently at the previous point in time can be considered to be consistent when the backup copy either includes, partially includes, or excludes all of the data being written by in-progress write operations. For example, consider that blocks 1 through 4 contain values `A.AAA' and concurrent write operations are in progress to change the values of blocks 1 and 2 to 'BB' when the primary node fails. Data in blocks 1-4 can be considered to be consistent with a backup copy having values of `AAAA' (indicating that neither write operation completed prior to the previous point in time), `13AAA' (indicating that the write operation to block 1 completed prior to the previous point in time but the write operation to block 2 did not), `ABAA' (indicating that the write operation to block 2 completed prior to the previous

- 11 -point in time but the write operation to block! did not), or 13BAA' (indicating that both write operations completed prior to the previous point in time).
While only one of these four scenarios can occur at a time, each scenario represents a valid possible state of the primary data, depending upon the timing of execution of the write operations, and therefore can be considered to be consistent. To ensure strict consistency of the data during replication such that the secondary data is an exact copy of a previous state of the primary data, some implementations may block write operations for a brief period of time to allow in-progress write operations to complete before replicating the results of those write operations.
tip The terms "write operation" and "update operation" are used interchangeably to describe making a change to data. The terms "change" and "modification," when used with reference to data, include adding new data as well as updating existing data.
The terms "change" and "modification," when used with reference to a configuration of data storage, include changing an existing configuration and/or adding a new configuration.
Data storage may take form as groups of one or more physical devices, such as one or more dynamic or static random access storage devices, one or more magnetic or optical data storage disks, or one or more other types of storage devices. With respect to backup copies of primary data, preferably the backup storage devices are direct access storage devices such as disks rather than sequential access storage devices such as tapes. Because disks are often grouped to form a logical storage volume that is used to store backup copies of primary data, the terms "storage," "data storage," and "data store" are used interchangeably herein with "volume" and "storage volume;" however, one of skill in the art will recognize that the systems and processes described herein are also applicable to other types of storage and that the use of the term "volume" is not intended to be limiting. A storage volume storing the primary data is referred to herein as a primary volume, and a storage volume storing a backup copy of the primary data is referred to herein as a backup volume, secondary volume, or

- 12 -remote volume. A storage volume storing a snapshot of data is referred to herein as a snapshot volume.
The terms "host" and "node" are used interchangeably to describe computer systems, which are described in the discussion of Fig. 4 below. A node in a network managing the primary data / volume is referred to herein as a primary node, and a node in the network maintaining backup copies of the primary data but not the primary data itself is referred to herein as a secondary, backup, or remote node.
The term "portion of data" may include all of the data or only some and not all of the data. Similarly, the terms "set" or "subset" of operations may include all of the operations or lo only some, and not all, of the operations.
Introduction Some embodiments described herein may provide the ability to maintain up-to-date, consistent copies of primary data on a secondary node in an efficient, cost-effective manner using minimal network bandwidth. Up-to-date, consistent copies of primary data may be maintained without the need to replicate modified data when the data were modified as a result of an operation that is not an application-driven write operation captured during replication. Selected storage management operations may be performed on the primary and secondary data stores at points in time when the data are the same so that the data stored within the data stores remain consistent.
Every operation performed on the primary data store is not performed on the secondary data store to achieve consistency of the primary and secondary data;
instead, only selected storage management operations are performed on both the primary and secondary data stores. The types of operations that are performed on both the primary and secondary data stores include operations that produce modified data stored in the primary data store, where the modified data are not replicated to a secondary node. For example, restoration of

- 13 -data from a snapshot volume is an operation that affects data stored in the primary data store, but where the modified data resulting from the restoration are not replicated.
Other types of storage management operations are selected to be performed on both the primary and secondary data stores, where the operations do not directly change data in the primary data store, but may have an effect on data stored in the primary data store. For example, a configuration change, such as creation of a snapshot volume, does not affect data stored in the primary data store, but rather makes a copy of that data, referred to as a snapshot.
Snapshots need not be written to a physical storage device, and therefore may be a "virtual"
copy in memory that can be used to reconstruct the state of the data in the primary data store.
However, if the snapshot were later used to restore data in the primary data store, and a copy of the snapshot volume is not available at the secondary node to be used to restore the secondary data store at that time, data in the primary and secondary data stores become inconsistent or an expensive operation is necessary to restore consistency. An example of an operation to restore consistency is copying all data modified by the restoration operation to the secondary data store. Some embodiments may ensure that a secondary snapshot volume containing a copy of the data used to restore the primary data store is available to be used to restore the data in the secondary data store. By providing the same data in the primary and secondary data stores, it is possible to avoid replicating each data item changed during the restoration.
Examples of operations that should be included in the set of operations include operations changing the size of the primary data store, making snapshots of the primary data store, making snapshots of snapshots, restoring snapshots, refreshing snapshots, and writing data to snapshot by an application. These operations should occur at the same respective points in time with reference to the data in the replication stream.
Coordination of the ordering of write operations with the replication stream ensures that all write operations performed between two operations on the primary data store are applied to the secondary data store between the two operations on the secondary node, and thus are applied to the same data.

- 14 -The state of having the same data in both the primary and secondary data stores can be represented as a "snapshot tree," where every copy (snapshot) of the primary data on the primary node has a corresponding copy (snapshot) of the same data on the secondary node.
By performing the same operations on snapshot trees containing the same data, replication of modified data can be avoided when the modified data are produced by an operation and not captured during replication. As mentioned above, snapshots need not be written to a physical storage device, and therefore may be a "virtual" copy in memory that can be used to reconstruct the state of the primary data.
Fig. 1 shows an example of a system environment in which the present invention may operate. Two nodes are shown, primary node 110A and secondary node 110B.
Software programs application 115A and storage manager / replicator 120A operate on primary node 110A. Application 115A manages primary data that can be stored in change log 130A and data storage 140A.
Change log 130A can be considered to be a "staging area" to which changes to data are written before being written to data storage 140A. Change logs such as change log 130A, also referred to simply as logs, are known in the art and can be implemented in several different ways; for example, an entry in the log may represent an operation to be performed on a specified region of the data. Alternatively, the log may be structured to maintain a set of operations with respect to each region. Other types of log structures are also possible, and no particular type of implementation of change logs is required. Some embodiments can be practiced without using a log, as long as write operations are performed such that the data remain consistent.
Storage manager / replicator 120A intercepts write operations to primary data by application 115A and replicates changes to the primary data to secondary node 110B. The type of replication performed by storage manager / replicator 120A can be synchronous, asynchronous, and/or periodic, as long as updates are applied such that the data in the secondary data storage are consistent with the data in the primary data storage. While

- 15 -application 115A and storage manager / replicator 120A may run on the same computer system, such as primary node 110A, the hardware and software configuration represented by primary node 110A may vary. Application 115A and storage manager / replicator 120A may run on different computer systems, change log 130A may be stored in non-persistent or persistent data storage, and data storage 140A is a logical representation of a set of data stored on a logical storage device which may include one or more physical storage devices.
Furthermore, while connections between application 115A, storage manager /
replicator 120A, change log 130A, and data storage 140A are shown within primary node 110A, one of skill in the art will understand that these connections are for illustration purposes to only and that other connection configurations are possible. For example, one or more of application 115A, storage manager / replicator 120A, change log 130A, and data storage 140A
can be physically outside, but coupled to, the node represented by primary node 110A.
Secondary data storage 140B is logically isolated from primary data storage 140A, and may be physically isolated as well, although physical isolation is not a requirement. Storage manager / replicator 120A of primary node 110A communicates over replication link 102C
with storage manager / replicator 120B of secondary node 110B. Secondary node 110B also includes a change log 130B and data storage 140B for storing a replica of the primary data, and similar variations in hardware and software configuration of secondary node 110B are possible.
Because storage manager / replicator 120A is configured to intercept write operations by application 115A to primary data and to replicate the changed data, modifications to primary data made as a result of performing other operations not involving application 115A
(such as reformatting disks in data storage 140A) may not be replicated. Such operations are further discussed with reference to Fig. 2.

- 16 -Fig. 2 is a flowchart of one example of a method for maintaining consistent and up-to-date copies of primary data on secondary nodes. In "Perform Set of Operations on Primary Data Store" step 210, a set of one or more operations is performed on a primary data store.
Each operation in the set of operations either modifies data stored in the primary data store or modifies a configuration of the primary data store. The set of operations is performed during copying of selected data (e.g., replication) from the primary data store to at least one secondary data store. Every operation performed on the primary data store is not also performed on the secondary data store; only selected operations are included in the set of operations.
If a given operation modifies data in the primary data store, in one embodiment, the modified data are copied to the secondary data store only if the modified data are not captured during the copying (replication) of the selected data from the primary data store to the secondary data store(s). However, a portion, but not all, of the modified data may also replicated from the primary data store to the secondary data store(s).
If a given operation modifies only a configuration of the primary data store, the given operation is performed on the secondary data store if the operation is a selected type of operation that may later affect data in the primary data store. As an example of such a configuration change, a snapshot volume may be created. The method further includes causing the set of operations to be performed on the secondary data store such that the data in the primary data store and the secondary data store are consistent. For example, if the set of operations produces modified data and the modified data are not included in the selected data copied to the second data store, a copy of the modified data is stored in the second data store after the set of operations is performed on the secondary data store. The data are consistent as a result of having the same data in both the primary and secondary data stores before each operation in the set of operations is performed. Consequently, the data are made consistent without copying each data item affected by the set of operations during replication.

- 17 -This set of operations can be performed by, for example, storage manager /
replicator 120A of Fig. 1. Storage manager / replicator 120A serves as an example of a performing module, means, or instructions for performing a set of operations on a primary data store, although other implementations of a performing module, means, or instructions may be used.
An example of such a commercially-available storage manager / replicator that can provide the functionality of the performing module, means, or instructions is the combination of the Veritas Volume Manager and Veritas Volume Replicator products available from Veritas Software Corporation of Mountain View, California.
From "Perform Set of Operations on Primary Data Store" step 210, control proceeds to "Identify Respective Time of Each Operation with respect to Changes to Data in Replication Stream" step 220. The time of each operation with respect to changes made in the replication stream can be used to ensure proper sequencing of each update to the data in the secondary data storage for maintaining consistency with the data in the primary data storage. One technique for identifying the time of the operation with respect to the changes to data in the replication stream is discussed below with reference to Figs. 3B and 3C.
From "Identify Respective Time of Each Operation with respect to Changes to Data in Replication Stream" step 220, control proceeds to "Cause Each Operation in the Set of Operations to be Performed on Secondary Data Storage at the Same Respective Time in the Replication Stream" step 230. As noted above, to maintain consistency of the data in the primary data storage and secondary data storage, the operation should be performed such that changes to the configuration or data are made at the same respective time (e.g., in the same order) on the secondary data storage that the changes were made to the primary data storage.
Storage manager / replicator 120A serves as an example of a causing module, means, or instructions for causing the set of operations to be performed on secondary data storage such that the second data includes modified data produced by the set of operations, although other implementations of a causing module, means, or instructions are possible. As noted earlier, an example of a commercially-available storage manager / replicator is the

- 18 -combination of the Veritas Volume Manager and Veritas Volume Replicator products available from Veritas Software Corporation of Mountain View, California.
Storage manager / replicator 120A can also be considered as an example of other types of modules, means, and instructions, including a snapshot creation module, means, or instructions to create a snapshot and create a corresponding snapshot of the secondary data storage; a restoration module, means or instructions to restore a portion of the primary data storage from a snapshot of the primary data storage and cause a corresponding portion of the secondary data storage to be restored from a corresponding snapshot; an inserting module, means or instructions to insert a command to perform the operation; a sending module, means m or instructions to send a command to perform the operation; and a synchronization module, means or instructions to synchronize two snapshots of the primary data and cause a corresponding two snapshots of the secondary data to be synchronized. Modules, means, and instructions can be implemented by storage manager / replicator 120A to perform other functions as well. Alternatively, the functionality described above with reference to storage manager / replicator 120A can be implemented as separate storage manager and replication modules or otherwise differently from the implementation described above.
Figs. 3A-3F show a series of actions occurring in the system of Fig. 1A.
Various updates to data are shown, along with creation of snapshot volumes of both primary data storage and secondary data storage such that the resulting snapshots are identical.
Fig. 3A shows a series of updates to data in primary storage, followed by creation of a snapshot of primary data. In action 3.1, application 115A performs a set of operations producing updates (also referred to as results of write operations or modified data) via storage manager / replicator 120A to volume 240A2 of replicated storage group 240A on primary node 110A. These updates include updates 220-a through 220-i, with each update occurring in sequential (alphanumeric) order. The set of updates is also referred to herein as a replication stream. In action 3.2, a corresponding snapshot 240A2-ss of volume 240A2 is made. Creation of snapshot 240A2-ss is an operation that affects the configuration of primary

- 19 -data storage 140A, which includes replicated storage group 240A. Snapshot 240A2-ss contains data resulting from the set of updates 220-a through 220-i.
Fig. 3B shows another set of updates occurring after the snapshot of Fig. 3A
is created.
Action 3.3 shows a set of updates 220-j through 220-m to volume 240A2. As shown in the example, update 220-i is the result of the last write operation before the snapshot operation creating snapshot 240A2-ss, and update 220-j is the result of the first write operation after the snapshot operation.
Fig. 3C shows replication of the data resulting from the updates of Figs. 3A
and 3B
and a command inserted into the replication stream. Primary storage volume 240A2 shows that all updates 220-a through 220-m have been written. As the data pass from application 115A through storage manager / replicator 120A to volume 240A2, storage manager /
replicator 120A captures the result of each write operation for replication.
The replication stream from storage manager / replicator 120A on primary node 110A and storage manager /
replicator 120B on secondary node 110B is shown. Update 220-a is shown within volume 240B2 of secondary node 110B, having been replicated as the result of the first write operation of the replication stream. Update 220-b is shown being communicated between storage manager / replicator 120B and volume 240B2, and update 220-c is shown arriving at storage manager / replicator 120B.
Updates after 220-c and through 220-i are shown in transit between primary node 110A and secondary node 110B, followed by a command 210. Command 210 is an instruction to perform a snapshot creation operation and is inserted in the replication stream at a location to ensure that each update to primary data storage and secondary data storage is made in the same order. Updates 220-j through 220-m are shown being replicated after command 210 in the replication stream. While additional updates after update 220-m are not shown, it is not necessary to discontinue updates to primary node 110A until secondary node 110B is synchronized. Replication can continue as operations to synchronize data in primary data storage and secondary data storage are performed. However, it is also possible to halt

- 20 -replication, wait for all updates to be replicated to the secondary data storage, perform the operation when all updates have been replicated, and then resume replication.
Fig. 3D shows arrival of command 210 at the secondary node. Updates 220-a through 220-i are now stored in secondary data storage 240B2. After command 210, in-transit updates follow, including update 220-j through update 220-m.
Fig. 3E shows creation of a snapshot on the secondary node in response to execution of command 210 at secondary node 110B. Snapshot volume 240B2-ss has been created, containing updates 220-a through 220-i. Updates 220-j through 220-m are in the process of being replicated to volume 240B2 on secondary node 110B.
Fig. 3F shows the system after all updates of Figs. 3A and 3B are written to storage on the secondary node. Volume 240B2 on secondary node 110B contains each of updates 220-a through 220-m and is a replica of volume 240A2 on primary node 110A. Snapshot volume 220B2-ss on secondary node 110B contains updates 220-a through 220-i and is a replica of snapshot volume 220A2-ss on primary node 110A. As a result of inserting command 210 in the replication stream between the last operation before creation of snapshot volume 240A2-ss and the first operation afterwards, snapshot volume 240B2-ss has been created as an exact replica of snapshot volume 240A2-ss. This process is made more efficient, as there is no need to send data across the network in addition to the data already being replicated as part of the replication stream. Insertion of a single command enables creation of a replica on the secondary node 110B without replicating portions of the data again.
When the operation makes a snapshot of the primary data storage, causing the operation to be performed on the secondary data storage includes making a corresponding snapshot of the secondary data storage. After the operation is performed on the secondary data storage, the snapshot of the first data storage contains first data, and the corresponding snapshot of the second data storage contains a replica of the first data.

- 21 -When the operation restores a portion of the data from another backup copy of the primary data storage, a corresponding portion of the data in the second data storage is restored from a corresponding backup copy of the data storage. For example, if primary data are restored from a snapshot on the primary node, the copy of the primary data on the secondary node is restored from a corresponding copy of the snapshot that resides on the secondary node. By ensuring that each operation of the set of operations on the primary node also occurs on the secondary node, including creation of snapshots, a corresponding copy of the snapshot also resides on the secondary node. The corresponding snapshot in the secondary data storage is a replica of the snapshot in the first data storage and thus can be used to perform the restoration of the secondary data storage with identical data.
When the operation synchronizes two snapshots of the primary data storage, causing the operation to be performed on the secondary data storage includes synchronizing a corresponding first snapshot and a corresponding second snapshot of the secondary data storage. If the first snapshot of the primary data storage contains first data, the corresponding first snapshot of the second data storage contains a replica of the first data after the synchronization of the secondary data storage. Similarly, if the second snapshot of the first data storage contains second data, the corresponding snapshot of the second data storage contains a replica of the second data after the synchronization of the secondary data storage.
In one embodiment, upon failure of a node associated with the primary data storage, a pending change of the set of changes designated for replication is identified if the pending change has not been made in the secondary data storage. The pending change is then made in the secondary data storage.
In at least one embodiment, when the snapshot volume is created on the secondary node, a replication relationship is established between the primary snapshot volume and the corresponding snapshot volume on the secondary node. Establishing a replication relationship causes a change to data in the primary snapshot to be included in selected snapshot data copied to the corresponding snapshot on the secondary node. As a result of the replication

- 22 -relationship, the corresponding snapshot volume on the secondary node will remain synchronized with the primary snapshot volume, as each update made to the primary snapshot volume will be replicated to the corresponding snapshot volume on the secondary node.
One of skill in the art will recognize that corresponding snapshot volumes and replication relationships can be established on more than one secondary node.
The techniques described above may enable a large number of copies of primary data to be maintained, with updates to data being replicated only once to the secondary node(s) and commands being included in the replication stream to perform other operations, even operations changing the data.
When replication is performed periodically, such that a set of changes is replicated upon certain events or upon expiration of a set time interval, it may be desirable to cause the pending set of changes to be replicated upon the occurrence of each storage management operation. This will ensure that the same changes are applied to secondary data storage in the same order prior to performing the storage management operation on the secondary data storage.
A replication module replicating the set of changes to data from primary to secondary data storage may be performed by software external to the software performing the operation.
It is desirable in such an implementation to configure the replication software so that the set of pending changes to data in primary data storage is made to secondary data storage before performing the operation on the secondary data storage.
Embodiment with Operations Performed at Approximately the Same Point in Replication In another embodiment of the invention, a command can be sent from primary node 110A to secondary node 110B at approximately the time that the operation is performed on primary node 110A, without necessarily ensuring that the command is executed at the exact

- 23 -point in the replication stream, as long as updates are performed in the same order on the primary and secondary nodes. Other mechanisms can be used to ensure that commands are issued at approximately the same point in time without inserting the command into the replication stream. For example, a pair of snapshots can be created in primary and secondary data storage at approximately the same time.
In this embodiment, a second set of changes to the primary data can occur after the snapshot is created on the primary data storage and before the snapshot creation operation on the secondary data storage. For example, the second set of changes may have been logged for replication but not yet replicated. The second set of changes is identified as changes that should be made in the secondary data storage so that the data in the primary and secondary data storage are consistent. Once the pair of snapshots is established, the two snapshots can be synchronized very quickly by identifying regions of data having differences between the two snapshots and replicating data from the primary to the secondary snapshot only for the identified regions. This synchronization operation ensures that the second set of changes is made to the secondary data storage so that it is consistent with the primary data storage.
A technique for synchronizing two snapshot volumes is described in U. S.
Patent Application No. 10/610,603 (attorney docket VRT0011US, client reference VRTS
0073), filed on July 1, 2003, entitled "Flexible Hierarchy of Relationships and Operations in Data Volumes," and naming as inventors Anand A. Kekre, John A. Colgrove, Oleg Kiselev, Ronald S. Karr, and Niranjan S. Pendharkar.
Embodiment with Separate Security Domains In yet another embodiment, separate security domains can be established for the primary and secondary nodes so that a user or process performing an operation on the primary data storage must pass through an additional security barrier to perform the same operation on the secondary data storage. Usually, when the reasons for replication are high availability and disaster resiliency, the secondary data store is physically isolated from the primary data store

- 24 -and the primary and secondary data stores are managed by separate nodes.
Normally, a primary node can access all mirrored copies of the primary data, and inaccessible secondary data means that read operations must be performed on the primary data itself (or on a copy of the data at the primary node). When considered from the point of view of data security, however, inaccessibility of secondary data by the primary node provides an additional security barrier to protect backup copies of the data from corruption. If the primary data are compromised by a malicious intruder, administrator mistake, or malfunctioning software or hardware, only locally accessible storage is directly jeopardized. To also corrupt the backup data, the additional security barrier must be overcome and the destructive actions corrupting the data must be repeated.
Referring again to Fig. 1, the system structure for an embodiment with separate security domains is designed such that primary node 110A can operate within a separate security domain than secondary node 110B. Replication link 102C can be configured to allow access only by storage managers / replicators 120A and 120B and not by application 115A or other processes running on primary node 110A. Access accounts for the primary node 110A
and secondary node 110B can be configured with different passwords, particularly system management and privileged accounts. Because storage manager / replicator 120A
is configured to intercept write operations by application 115A to primary data and to replicate the changed data, changes to primary data made as a result of performing other destructive actions not involving application 115A (such as reformatting disks in data storage 140A) may not be replicated.
As additional security features, the system can be designed such that replication link 102C is the only communication link between security domains for primary nodes 110A and 110B. The system can also be configured such that only data conforming to protocols used by storage managers / replicators 120A and 120B are transmitted across replication link 102C.
When primary and secondary data storage 140A and 140B are connected via a Storage Area Network (SAN, not shown), the system can be configured to implement the primary and

- 25 -secondary data storage 140A and 140B as portions of two different physical networks to provide an additional security barrier.
In this embodiment with separate security domains, primary node 110A does not have direct access to data storage 140B. To access data on secondary node 110B, primary node 110A requests the data from secondary node 110B and performs operations on the data in primary data storage 140A. Storage manager / replicator 120A then replicates updates over replication link 102C to storage manager / replicator 120B.
A technique for maintaining primary data and secondary data in separate security domains is described in U. S. Patent Application No. 10/699,475, filed on October 31, 2003, entitled "Synchronous Replication for System and Data Security," and naming as inventor Oleg Kiselev.
The above-described embodiments can be implemented in a variety of computing and networking environments. An example computing environment that can be used is described below with reference to Fig. 4.
An Example Computer System Fig. 4 is a block diagram of a computer system 410 suitable for implementing one embodiment. Computer system 410 includes a bus 412 which interconnects major subsystems of computer system 410, such as a central processor 414, a system memory 417 (typically RAM, but which may also include ROM, flash RAM, or the like), an input/output controller 418, an external audio device, such as a speaker system 420 via an audio output interface 422, an external device, such as a display screen 424 via display adapter 426, serial ports 428 and 430, a keyboard 432 (interfaced with a keyboard controller 433), a storage interface 434, a floppy disk drive 437 operative to receive a floppy disk 438, a host bus adapter (HBA) interface card 435A operative to connect with a fibre channel network 490, a host bus adapter (HBA) interface card 435B operative to connect to a SCSI bus 439, and an optical disk drive

- 26 -440 operative to receive an optical disk 442. Also included are a mouse 446 (or other point-and-click device, coupled to bus 412 via serial port 428), a modem 447 (coupled to bus 412 via serial port 430), and a network interface 448 (coupled directly to bus 412).
Bus 412 allows data communication between central processor 414 and system memory 417, which may include read-only memory (ROM) or flash memory (neither shown), and random access memory (RAM) (not shown), as previously noted. The RAM is generally the main memory into which the operating system and application programs are loaded and typically affords at least 64 megabytes of memory space. The ROM or flash memory may contain, among other code, the Basic Input-Output system (BIOS) which controls basic hardware operation such as the interaction with peripheral components.
Applications resident with computer system 410 are generally stored on and accessed via a computer readable medium, such as a hard disk drive (e.g., fixed disk 444), an optical drive (e.g., optical drive 440), floppy disk unit 437 or other storage medium. Additionally, applications may be in the form of electronic signals modulated in accordance with the application and data communication technology when accessed via network modem 447 or interface 448.
Storage interface 434, as with the other storage interfaces of computer system 410, may connect to a standard computer readable medium for storage and/or retrieval of information, such as a fixed disk drive 444. Fixed disk drive 444 may be a part of computer system 410 or may be separate and accessed through other interface systems.
Modem 447 may provide a direct connection to a remote server via a telephone link or to the Internet via an interne service provider (ISP). Network interface 448 may provide a direct connection to a remote server via a direct network link to the Internet via a POP (point of presence).
Network interface 448 may provide such connection using wireless techniques, including digital cellular telephone connection, Cellular Digital Packet Data (CDPD) connection, digital satellite data connection or the like.
Many other devices or subsystems (not shown) may be connected in a similar manner (e.g., bar code readers, document scanners, digital cameras and so on).
Conversely, it is not

- 27 -necessary for all of the devices shown in Fig. 4 to be present. The devices and subsystems may be interconnected in different ways from that shown in Fig. 4. The operation of a computer system such as that shown in Fig. 4 is readily known in the art and is not discussed in detail in this application. Code to implement the present embodiment may be stored in computer-readable storage media such as one or more of system memory 417, fixed disk 444, optical disk 442, or floppy disk 438. Additionally, computer system 410 may be any kind of computing device, and so includes personal data assistants (PDAs), network appliances, X-window terminals or other such computing devices. The operating system provided on computer system 410 may be MS-DOS , MS-WINDOWS , OS/20, UNIX , Linux , or to another known operating system. Computer system 410 also supports a number of Internet access tools, including, for example, an HTTP-compliant web browser having a JavaScript interpreter, such as Netscape Navigator , Microsoft Explorer , and the like.
Other Embodiments Some embodiments may be well adapted to attain the advantages mentioned as well as others inherent therein. While embodiments have been depicted, described, they do not imply a limitation on the invention, and no such limitation is to be inferred. Some embodiments are capable of considerable modification, alteration, and equivalents in form and function, as will occur to those ordinarily skilled in the pertinent arts. The depicted and described embodiments are examples only, and are not exhaustive of the scope of the invention.
The foregoing detailed description has set forth various embodiments via the use of block diagrams, flowcharts, and examples. It will be understood by those within the art that each block diagram component, flowchart step, operation and/or component illustrated by the use of examples can be implemented, individually and/or collectively, by a wide range of hardware, software, firmware, or any combination thereof.

- 28 -The embodiments have been described in the context of fully functional computer systems; however, those skilled in the art will appreciate that some embodiments are capable of being distributed as a program product in a variety of forms, regardless of the particular type of signal bearing media used to actually carry out the distribution.
Examples of signal bearing media include recordable media such as floppy disks and CD-ROM, transmission type media such as digital and analog communications links, as well as media storage and distribution systems developed in the future.
The above-discussed embodiments may be implemented by software modules that perform certain tasks. The software modules discussed herein may include script, batch, or other executable files. The software modules may be stored on a machine-readable or computer-readable storage medium such as a disk drive. Storage devices used for storing software modules in accordance with an embodiment may be magnetic floppy disks, hard disks, or optical discs such as CD-ROMs or CD-Rs, for example. A storage device used for storing firmware or hardware modules in accordance with an embodiment may also include a semiconductor-based memory, which may be permanently, removably or remotely coupled to a microprocessor/memory system. Thus, the modules may be stored within a computer system memory to configure the computer system to perform the functions of the module.
Other new and various types of computer-readable storage media may be used to store the modules discussed herein.
The above description is intended to be illustrative of various embodiments and should not be taken to be limiting. Other embodiments within the scope of the present invention are possible. Those skilled in the art will readily implement the steps necessary to provide the structures and the methods disclosed herein, and will understand that the process parameters and sequence of steps are given by way of example only and can be varied to achieve the desired structure as well as modifications that are within the scope of the invention.
Variations and modifications of the embodiments disclosed herein can be made based on the description set forth herein, without departing from the scope of the invention. Consequently, the invention is intended to be limited only by the scope of the appended claims.

Claims (22)

THE EMBODIMENTS OF THE INVENTION IN WHICH AN EXCLUSIVE
PROPERTY OR PRIVILEGE IS CLAIMED ARE DEFINED AS FOLLOWS:
1. A method comprising:
establishing a relationship between a first data store and a second data store, performing a set of storage management operations on the first data store, wherein:
the first data store stores first data, each storage management operation of the set of storage management operations on the first data store performs at least one of:
producing modified data from data in the first data store, and changing a configuration of the first data store, the performing the set of storage management operations on the first data store occurs while the relationship is ongoing, during a procedure in which the first data in the first data store is being copied to the second data store, and the set of storage management operations comprises certain storage management operations the results of which would not be captured during the procedure; and performing the set of storage management operations on the second data store, wherein if the set of storage management operations performed on the first data store produces the modified data and a portion of the modified data is not included in the first data, the second data store is updated to include a copy of the portion of the modified data by virtue of the performing the set of storage management operations on the second data store, and the set of storage management operations is performed in a first relative order on the first data store with respect to a set of application-driven writes to the first data store, and the set of storage management operations is performed in the same relative order on the second data store such that consistency is maintained between the second data store and the first data store.
2. The method of claim 1 wherein:
one storage management operation of the set of storage management operations restores a portion of the first data in the first data store from third data in a third data store; and the performing the set of storage management operations on the second data store comprises:
causing a corresponding portion of second data in the second data store to be restored from fourth data in a fourth data store, wherein:
the portion of the first data and the portion of the second data are the same after the restoring the portion of the first data and after the causing the corresponding portion of the second data to be restored.
3. The method of claim 1 wherein:

one storage management operation of the set of storage management operations synchronizes the first data in the first data store with third data in a third data store; and the performing the set of storage management operations on the second data store comprises:
causing second data in the second data store to be synchronized with fourth data in a fourth data store corresponding to the third data store, wherein the first data and the second data are the same after the synchronizing the first data and after the causing the second data to be synchronized.
4. The method of claim 1 wherein:
one storage management operation of the set of storage management operations changes the configuration of the first data store by creating a first snapshot data store related to the first data store wherein:
a first snapshot of the first data in the first data store is stored in the first snapshot data store; and the performing the set of storage management operations on the second data store comprises:
causing a second snapshot data store related to the second data store to be created, wherein:
a second snapshot of second data in the second data store is stored in the second snapshot data store, and the first snapshot and the second snapshot comprise data that are the same.
5. The method of claim 4 further comprising:
establishing a replication relationship between the first snapshot data store and the second snapshot data store after the second snapshot data store is created, wherein:
the replication relationship causes subsequently modified data in the first snapshot data store to be included in selected snapshot data copied to the second snapshot data store.
6. The method of claim 5 wherein:
the subsequently modified data are copied to the second snapshot data store when the selected data are copied to the second data store.
7. The method of claim 1 wherein:
at a first point in time during the performing the set of storage management operations on the first data store, a first storage management operation of the set of storage management operations is performed on the first data store, and the first data store comprises the first data, and at a second point in time, when the first storage management operation is performed on the second data store, the second data store comprises a copy of the first data.
8. The method of claim 1 wherein:

if at a first point in time during the performing the set of storage management operations on the first data store, the first data store comprises the first data, then at a second point in time, when the second data store represents the first data store at the first point in time, the second data store comprises a copy of the first data.
9. The method of claim 1 wherein:
the set of storage management operations comprises:
an ordered subset of the set of storage management operations, wherein:
storage management operations in the ordered subset of storage management operations are performed on both the first data store and the second data store in a sequential order.
10. The method of claim 8, further comprising:
producing the modified data at a specified point in the first relative order on the first data store, wherein:
the specified point is between a first respective point in the first relative order and a second respective point in the first relative order, the first respective point and the second respective point are adjacent in the first relative order, and the performing the set of storage management operations on the second data store comprises:

causing the producing the copy of the modified data to occur at the specified point in the first relative order on the second data store.
11. The method of claim 10 wherein:
the causing the producing the copy of the modified data to occur at the specified point comprises:
inserting a command in the first data copied from the first data store to the second data store to produce the copy of the modified data at the specified point.
12. The method of claim 9 wherein:
the ordered subset of storage management operations comprises:
all storage management operations in the set of storage management operations.
13. The method of claim 1 wherein:
the performing the set of storage management operations on the second data store comprises:
causing at least one command that performs the set of storage management operations to be executed on the second data store.
14. The method of claim 1 wherein:
the first data comprises data modified as a result of a write operation.
15. The method of claim 14 wherein:
the set of storage management operations does not include the write operation.
16. The method of claim 14 wherein:
the first data further comprises a portion of a snapshot of the first data stored in the first data store, and the portion of the snapshot is modified as a result of a second write operation.
17. The method of claim 16 wherein:
the set of storage management operations does not include the second write operation.
18. The method of claim 1 further comprising:
upon failure of a primary node associated with the first data store, identifying a portion of the first data in the first data store, wherein the portion has not been copied to the second data store, and causing only the portion to be copied to the second data store such that the first data and second data stored in the second data store are the same.
19. A system comprising:
establishing means for establishing a relationship between a first data store and a second data store, performing means for performing a set of storage management operations on the first data store, wherein:
the first data store stores first data, each storage management operation of the set of storage management operations on the first data store performs at least one of:
producing modified data from first data in the first data store, and changing a configuration of the first data store, the performing the set of storage management operations on the first data store occurs while the relationship is ongoing, during a procedure in which the first data in the first data store is being copied to a second data store, and the set of storage management operations comprises certain storage management operations, the results of which would not be captured during the procedure; and second performing means for performing the set of storage management operations on the second data store, wherein:
if the set of storage management operations performed on the first data store produces the modified data and a portion of the modified data is not included in the first data, the second data store is updated to include a copy of the portion of the modified data by virtue of the performing the set of storage management operations on the second data store, and the set of storage management operations is performed in a first relative order on the first data store with respect to a set of application-driven writes to the first data store, and the set of storage management operations is performed in the same relative order on the second data store such that consistency is maintained between the second data store and the first data store.
20. The system of claim 19 wherein:
the set of storage management operations comprises:
an ordered subset of the set of storage management operations, wherein:
storage management operations in the ordered subset of storage management operations are performed on both the first data store and the second data store in a sequential order.
21. The system of claim 20 further comprising:
causing means for causing the producing the copy of the modified data to occur at a specified point in the sequential order on the second data store, wherein:
producing the modified data occurs at the specified point in the sequential order on the first data store, the specified point is between a first respective point in the sequential order and a second respective point in the sequential order, the first respective point and the second respective point are adjacent in the sequential order.
22. The system of claim 21 further comprising:
inserting means for inserting a command in the first data copied from the first data store to the second data store to produce the copy of the modified data at the specified point.
CA2548866A 2003-12-31 2004-12-30 Coordinated storage management operations in replication environment Active CA2548866C (en)

Priority Applications (3)

Application Number Priority Date Filing Date Title
US10/750,596 US7139887B2 (en) 2003-12-31 2003-12-31 Coordinated storage management operations in replication environment
US10/750,596 2003-12-31
PCT/US2004/044029 WO2005066783A2 (en) 2003-12-31 2004-12-30 Coordinated storage management operations in replication environment

Publications (2)

Publication Number Publication Date
CA2548866A1 CA2548866A1 (en) 2005-07-21
CA2548866C true CA2548866C (en) 2016-07-05

Family

ID=34701221

Family Applications (1)

Application Number Title Priority Date Filing Date
CA2548866A Active CA2548866C (en) 2003-12-31 2004-12-30 Coordinated storage management operations in replication environment

Country Status (6)

Country Link
US (3) US7139887B2 (en)
EP (1) EP1700215B1 (en)
JP (2) JP2007517340A (en)
CN (1) CN1902595B (en)
CA (1) CA2548866C (en)
WO (1) WO2005066783A2 (en)

Families Citing this family (62)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7454529B2 (en) * 2002-08-02 2008-11-18 Netapp, Inc. Protectable data storage system and a method of protecting and/or managing a data storage system
US7437387B2 (en) * 2002-08-30 2008-10-14 Netapp, Inc. Method and system for providing a file system overlay
US7882081B2 (en) * 2002-08-30 2011-02-01 Netapp, Inc. Optimized disk repository for the storage and retrieval of mostly sequential data
US7567993B2 (en) * 2002-12-09 2009-07-28 Netapp, Inc. Method and system for creating and using removable disk based copies of backup data
US8024172B2 (en) * 2002-12-09 2011-09-20 Netapp, Inc. Method and system for emulating tape libraries
EP2316385B1 (en) * 2002-12-20 2014-02-26 Smith & Nephew, Inc. High performance knee prostheses
US6973369B2 (en) * 2003-03-12 2005-12-06 Alacritus, Inc. System and method for virtual vaulting
US7437492B2 (en) * 2003-05-14 2008-10-14 Netapp, Inc Method and system for data compression and compression estimation in a virtual tape library environment
WO2005048085A2 (en) 2003-11-13 2005-05-26 Commvault Systems, Inc. System and method for performing an image level snapshot and for restoring partial volume data
US7406488B2 (en) * 2004-02-04 2008-07-29 Netapp Method and system for maintaining data in a continuous data protection system
US7904679B2 (en) * 2004-02-04 2011-03-08 Netapp, Inc. Method and apparatus for managing backup data
US7426617B2 (en) 2004-02-04 2008-09-16 Network Appliance, Inc. Method and system for synchronizing volumes in a continuous data protection system
US7490103B2 (en) * 2004-02-04 2009-02-10 Netapp, Inc. Method and system for backing up data
US7783606B2 (en) * 2004-02-04 2010-08-24 Netapp, Inc. Method and system for remote data recovery
US7315965B2 (en) 2004-02-04 2008-01-01 Network Appliance, Inc. Method and system for storing data using a continuous data protection system
US7325159B2 (en) * 2004-02-04 2008-01-29 Network Appliance, Inc. Method and system for data recovery in a continuous data protection system
US7720817B2 (en) * 2004-02-04 2010-05-18 Netapp, Inc. Method and system for browsing objects on a protected volume in a continuous data protection system
US7559088B2 (en) * 2004-02-04 2009-07-07 Netapp, Inc. Method and apparatus for deleting data upon expiration
US20050182910A1 (en) * 2004-02-04 2005-08-18 Alacritus, Inc. Method and system for adding redundancy to a continuous data protection system
US7120769B2 (en) * 2004-03-08 2006-10-10 Hitachi, Ltd. Point in time remote copy for multiple sites
US8028135B1 (en) 2004-09-01 2011-09-27 Netapp, Inc. Method and apparatus for maintaining compliant storage
US7774610B2 (en) * 2004-12-14 2010-08-10 Netapp, Inc. Method and apparatus for verifiably migrating WORM data
US7581118B2 (en) * 2004-12-14 2009-08-25 Netapp, Inc. Disk sanitization using encryption
US7746875B1 (en) * 2004-12-21 2010-06-29 Emc Corporation System and method for protecting and sharing data across a network
US7779295B1 (en) * 2005-06-28 2010-08-17 Symantec Operating Corporation Method and apparatus for creating and using persistent images of distributed shared memory segments and in-memory checkpoints
US7401198B2 (en) * 2005-10-06 2008-07-15 Netapp Maximizing storage system throughput by measuring system performance metrics
KR20080071988A (en) * 2005-11-23 2008-08-05 에프 에스 아이 인터내셔날,인코포레이티드 Process for removing material from substrates
US8458422B1 (en) * 2005-12-22 2013-06-04 Oracle America, Inc. Policy based creation of export sets and backup media
US7752401B2 (en) 2006-01-25 2010-07-06 Netapp, Inc. Method and apparatus to automatically commit files to WORM status
US8321377B2 (en) * 2006-04-17 2012-11-27 Microsoft Corporation Creating host-level application-consistent backups of virtual machines
US7650533B1 (en) 2006-04-20 2010-01-19 Netapp, Inc. Method and system for performing a restoration in a continuous data protection system
US8091114B2 (en) * 2006-09-15 2012-01-03 Bombardier Transportation Gmbh Integrated security event management system
US7900142B2 (en) * 2007-01-15 2011-03-01 Microsoft Corporation Selective undo of editing operations performed on data objects
JP2008191808A (en) * 2007-02-02 2008-08-21 Hitachi Ltd Storage system
US9152515B2 (en) 2007-11-27 2015-10-06 International Business Machines Corporation Apparatus and method for managing storage copy services systems
US8489831B2 (en) * 2008-10-01 2013-07-16 Hewlett-Packard Development Company, L.P. Systems and methods for data snapshot replication using a token in a replication link
US8452931B1 (en) * 2010-01-15 2013-05-28 Symantec Corporation Systems and methods for simultaneously providing multiple data protection functions
US9804928B2 (en) * 2011-11-14 2017-10-31 Panzura, Inc. Restoring an archived file in a distributed filesystem
JP2012079100A (en) * 2010-10-01 2012-04-19 Canon Inc Disk control apparatus and method and program
US8799222B2 (en) * 2010-12-17 2014-08-05 Symantec Corporation Host based software block level replication using metadata indicating changed data objects at source and secondary nodes
US9002793B1 (en) * 2011-10-05 2015-04-07 Google Inc. Database replication
US9298715B2 (en) 2012-03-07 2016-03-29 Commvault Systems, Inc. Data storage system utilizing proxy device for storage operations
US9471578B2 (en) 2012-03-07 2016-10-18 Commvault Systems, Inc. Data storage system utilizing proxy device for storage operations
US9342537B2 (en) * 2012-04-23 2016-05-17 Commvault Systems, Inc. Integrated snapshot interface for a data storage system
CN102890647B (en) * 2012-07-04 2015-04-22 漳州科能电器有限公司 Method and device for storing and updating data
US9886346B2 (en) 2013-01-11 2018-02-06 Commvault Systems, Inc. Single snapshot for multiple agents
US9069709B1 (en) * 2013-06-24 2015-06-30 Emc International Company Dynamic granularity in data replication
CN103842954B (en) * 2013-12-05 2017-02-15 华为技术有限公司 A data processing method in a memory system, devices, systems, and servers
US9753812B2 (en) 2014-01-24 2017-09-05 Commvault Systems, Inc. Generating mapping information for single snapshot for multiple applications
US9632874B2 (en) 2014-01-24 2017-04-25 Commvault Systems, Inc. Database application backup in single snapshot for multiple applications
US9639426B2 (en) 2014-01-24 2017-05-02 Commvault Systems, Inc. Single snapshot for multiple applications
US9495251B2 (en) 2014-01-24 2016-11-15 Commvault Systems, Inc. Snapshot readiness checking and reporting
US20150294119A1 (en) * 2014-04-10 2015-10-15 International Business Machines Corporation Booting a multi-node computer system from a primary node dynamically selected based on security setting criteria
US9218407B1 (en) 2014-06-25 2015-12-22 Pure Storage, Inc. Replication and intermediate read-write state for mediums
US9774672B2 (en) 2014-09-03 2017-09-26 Commvault Systems, Inc. Consolidated processing of storage-array commands by a snapshot-control media agent
US10042716B2 (en) 2014-09-03 2018-08-07 Commvault Systems, Inc. Consolidated processing of storage-array commands using a forwarder media agent in conjunction with a snapshot-control media agent
US9448731B2 (en) 2014-11-14 2016-09-20 Commvault Systems, Inc. Unified snapshot storage management
US9648105B2 (en) 2014-11-14 2017-05-09 Commvault Systems, Inc. Unified snapshot storage management, using an enhanced storage manager and enhanced media agents
US10176064B2 (en) * 2016-02-26 2019-01-08 Netapp Inc. Granular consistency group replication
US10055149B2 (en) * 2016-04-14 2018-08-21 Seagate Technology Llc Intelligent snapshot tree replication
US10394482B2 (en) 2016-04-14 2019-08-27 Seagate Technology Llc Snap tree arbitrary replication
US10341247B2 (en) 2016-10-27 2019-07-02 International Business Machines Corporation Handling path issues for storage copy services

Family Cites Families (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5155845A (en) * 1990-06-15 1992-10-13 Storage Technology Corporation Data storage system for providing redundant copies of data on different disk drives
US5592618A (en) * 1994-10-03 1997-01-07 International Business Machines Corporation Remote copy secondary data copy validation-audit function
US5819020A (en) * 1995-10-16 1998-10-06 Network Specialists, Inc. Real time backup system
JP3400297B2 (en) * 1997-06-04 2003-04-28 株式会社日立製作所 Data copying method for storage subsystem and the storage subsystem
JP3414218B2 (en) * 1997-09-12 2003-06-09 株式会社日立製作所 Storage controller
JP2000305856A (en) * 1999-04-26 2000-11-02 Hitachi Ltd Disk subsystems and integration system for them
US6611901B1 (en) * 1999-07-02 2003-08-26 International Business Machines Corporation Method, system, and program for maintaining electronic data as of a point-in-time
US6338126B1 (en) * 1999-12-06 2002-01-08 Legato Systems, Inc. Crash recovery without complete remirror
US6584581B1 (en) * 1999-12-06 2003-06-24 Ab Initio Software Corporation Continuous flow checkpointing data processing
US6457109B1 (en) * 2000-08-18 2002-09-24 Storage Technology Corporation Method and apparatus for copying data from one storage system to another storage system
US6510500B2 (en) 2001-03-09 2003-01-21 International Business Machines Corporation System and method for minimizing message transactions for fault-tolerant snapshots in a dual-controller environment
JP4159365B2 (en) * 2001-03-16 2008-10-01 コーニンクレッカ フィリップス エレクトロニクス エヌ ヴィ Dc-dc converter
GB2377284B (en) * 2001-07-02 2005-06-22 Sun Microsystems Inc Computer storage systems
JP4689137B2 (en) * 2001-08-08 2011-05-25 株式会社日立製作所 Remote copy control method and storage system
US7296125B2 (en) * 2001-11-29 2007-11-13 Emc Corporation Preserving a snapshot of selected data of a mass storage system
US7139932B2 (en) * 2002-01-03 2006-11-21 Hitachi, Ltd. Data synchronization of multiple remote storage after remote copy suspension
US6948089B2 (en) * 2002-01-10 2005-09-20 Hitachi, Ltd. Apparatus and method for multiple generation remote backup and fast restore
US7251713B1 (en) * 2002-03-18 2007-07-31 Xiotech Corporation System and method to transport data snapshots
JP2004013367A (en) * 2002-06-05 2004-01-15 Hitachi Ltd Data storage subsystem
US7020743B2 (en) * 2003-02-24 2006-03-28 Sun Microsystems, Inc. Atomic remote memory operations in cache mirroring storage systems
US7398285B2 (en) * 2003-07-30 2008-07-08 International Business Machines Corporation Apparatus and system for asynchronous replication of a hierarchically-indexed data store
JP4598387B2 (en) 2003-09-17 2010-12-15 株式会社日立製作所 Storage system
US7133986B2 (en) * 2003-09-29 2006-11-07 International Business Machines Corporation Method, system, and program for forming a consistency group
CN1311560C (en) * 2003-10-16 2007-04-18 电子科技大学 Transverse low-side high-voltage device and high-side high-voltage device

Also Published As

Publication number Publication date
CN1902595A (en) 2007-01-24
CN1902595B (en) 2012-07-04
EP1700215A2 (en) 2006-09-13
JP5386005B2 (en) 2014-01-15
EP1700215B1 (en) 2013-02-20
CA2548866A1 (en) 2005-07-21
US20070043918A1 (en) 2007-02-22
US20080320261A1 (en) 2008-12-25
US20050144407A1 (en) 2005-06-30
US8001346B2 (en) 2011-08-16
JP2012190471A (en) 2012-10-04
JP2007517340A (en) 2007-06-28
US7139887B2 (en) 2006-11-21
WO2005066783A3 (en) 2005-12-08
US7421554B2 (en) 2008-09-02
WO2005066783A2 (en) 2005-07-21

Similar Documents

Publication Publication Date Title
US7962620B2 (en) Processing requests in virtual computing environments
US7899788B2 (en) Using a data protection server to backup and restore data on virtual servers
US7941501B2 (en) Flexible remote data mirroring
JP4603755B2 (en) Methods and systems for adjusting the plurality of snapshots provider in common, manage
US7383463B2 (en) Internet protocol based disaster recovery of a server
US9823865B1 (en) Replication based security
US6654752B2 (en) Method and apparatus for independent and simultaneous access to a common data set
JP2509460B2 (en) Remote data of multiple systems - method for performing data backup and recovery and systems
CN101243413B (en) System and method for virtualizing backup images
CN100342344C (en) Method and apparatus for ensuring valid journaled file system metadata during a backup operation
US5608865A (en) Stand-in Computer file server providing fast recovery from computer file server failures
US7596713B2 (en) Fast backup storage and fast recovery of data (FBSRD)
US7318095B2 (en) Data fail-over for a multi-computer system
US7415488B1 (en) System and method for redundant storage consistency recovery
US7318134B1 (en) Continuous data backup using distributed journaling
US20040254964A1 (en) Data replication with rollback
US7814365B2 (en) Backing up selected files of a computer system
US9405481B1 (en) Replicating using volume multiplexing with consistency group file
US7096250B2 (en) Information replication system having enhanced error detection and recovery
US7672979B1 (en) Backup and restore techniques using inconsistent state indicators
US7058846B1 (en) Cluster failover for storage management services
US8250202B2 (en) Distributed notification and action mechanism for mirroring-related events
US6088697A (en) Dynamic change management in an extended remote copy operation
US20100299309A1 (en) Backup management method
US5692155A (en) Method and apparatus for suspending multiple duplex pairs during back up processing to insure storage devices remain synchronized in a sequence consistent order

Legal Events

Date Code Title Description
EEER Examination request